CVE-2018-17232

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...

CVE-2018-17232: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot aka slack-archive-bot before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute...

PT-2018-13959

Name of the Vulnerable Software and Affected Versions slack-archive-bot versions prior to 2018-09-19 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the text parameter to cursor.execute in the archivebot.py script. Recommendations For versions...